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Amendments to the Claims 

This listing of claims will replace ail prior versions and listing of claims in the application: 
T jsting Qf ClMn!? 



Claim 1 (currently amended): In a multicast capable Internet Protocol (IP) network, a 
method ormuUicast address hopping for communicating multicast packets between transmitter 
and subscriber end stations on a chosen multicast (IP) address selected from a plurality of 
multicast IP addresses for muUica<»t communication, the method comprising the step of: 

selectively varying the chosen multicast IP address selected from the plurality ofmulticaiil 
IP addresses according to a predetermined scheme known only to the transmilter and subscriber 
end stations; and communicating the multicast packets on the chosen multicast TP address, 

wherein clectivelv varyinji the chosen multicast TP address is initiated bv a cryptographic 

key . 

Claim 2 (curretilly amended): The method of claim 1 wherein the multicast packets are 
communicated to axi end station having subscribed to a set of multicast TP addresses known only 
to the transmitter and subscriber end stations comprising at least one multicast IP address known 
only to the transmitter and subscriber end stations, selected from the plurality of multicast TP 
addresses for multicast communication and including tlic chosen multicast IP address kiomi 
only to the transmitter and subscriber end stations for transmitting the multicast packets. 

Claim 3 (currently amended): The method of claim 2 wherein the set of multicast IP 
addresses is selectively varied according to a predetermined scheme known only to the 
transmitter and subscriber end stations. 



Claim 4 (currently amended): The method of claim 3 wherein the predetermined scheme 
for selectively varying the set of multicast IP addresses comprises ra n do m ly adding to and 
dropping from the set of muhicast IP addresses in a sequence k nown onlv to the transmitter and 
subscriber end stations but which appears random to an attacker . 

Claim 5 (currently amended): The method of claim 1 wherein the step of selectively 
varying the chosen multicast IP address comprises: 

landomty hopping from one multicast IP address to another in a sequence known only to 
tlie transmitter and subscriber end stations but which appears random to an attacker . 

Claim 6 (currently amended): The method of claim 3 wherein the step of selectively 
varying the chosen multicast IP address comprises: 

landonily hopping from one multicast IP address to another chosen from the set of 
multicast IP addresses in a sequence known onlv to the transmitter and subscriber end stations 
hut which appears ran dom to an attacker. 
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Claim 7 (cvirrcntly amended): The method of claim 1, further including tlic steps of: 
receiving unicaijl data intended for [a] an end destination host site by at least i>ne remote 

decoy end station for transmitting multicast packets; and 

ronmulting :$aiti the unicusl data into sard Ae multicast packets for communicating on imd 

the chosen multicast iP address to at least one subscriber end station (or receiving multicast 

packets; 

wherein the at least one of $a i d s>ubscriber end station for receiving multicast packets is 
capable of communicating «rid the unicast data to said the host site. 

Claim 8 (currently amended): The method of claim 7 further including the .step of: 
identifying to the IP network a preferred route to the end destination host site though isaH 
the at least one remote dccov end station for transmitting multicast packets. 

Claim 9 (cuiTcntly amended): The method of claim 8 [6] further including the step of: 
fihering «mi the unicast data received at the at least one remote decov end stotioa and 
limiting the rate of communicating the multicast packets. 

Claim 10 (currently amended): The method of claim 9 wherein the step of filtering 
comprises identifying and discarding, at the at least one remote dccov end station^ unicast data 
implementing an attack on ^;aid Oic host site. 

Claim 1 1 (currently amended): The method of claim U) [6J wherein said the at least one 
remote dccov end station[s] for transmitting multicast packets is [are] located within a single 
autonomous sy.stem of the IP network. 



Claim 12 (eurrendy amended): The method of claim 11 wherein utaiA the at least one 
remote dceov end station for transmitting multicast packets is [are] located adjacent to border 
routers within the single autonomous system of thelP network. 

Claim 13 (currently amended): In amuhicast capable Internet Protocol (EP) network, a 
system of multicast address hoppin^ for communicating multicast packets between fran<;mittcr 
and subscriber end stations on a chosen multicast (TP) address selected from a plurality of 
multicast IP addresses for multicast communication, the system comprising: 

means for selectively varying the chosen multicast TP address from the plurality of 
multicast IP addresses according to a predetemiined scheme known only to the transmitter and 
subscriber end stations; and means for communicating the multicast packets on the chosen 
multicast IP address, 

wherein the means for seleettvelv varvin^ the chosen multicast TP addres s is initiated bv a 
crvptopraphic key . 

Claim 1 4 (currently amended): The system of claim 1 3 wherein the multicast packets arc 
For commiuiication to an end station having means to subscribe[d] to a set of multicast TP 
addresses known onlv tt) the transmit ter and subscriber end stations comprising at least one 
multicast TP address k nown onlv to th e t mn«milicr and subs crib er end siations selecte d from the 
plurality of multicast TP addresses for multicast communication and including ihc chosen 
multicast IP address known (mlv to the transmitter and suh ^f:r^T?er end stations for transmitting 
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ihe multicast packeL<i. 

Claim 15 (currently amended)): The system of claim 14 wherein the multicast packets are 
ri)r communication to an end 5:taiion having mean^i to selectively vary the set of multicast IP 
addresses according to a predetermined scheme known only to the transmitter and subscriber end 
stations. 

Claim 16 (currently amended)): The system of claim 1 5 wherein the predetermined 
scheme for selectively varying the set of multicast IP addresses comprises r andomly adding to 
and dropping from the set of muhicast IP addresses jn 3 spq^ppcc known qnlv to the t^giiispjjltey 
and subscriber end stations but which appears random to an attacker . 

Claim 17 (currently amended): The system ol' claim 13 wherein the means for selectively 
varying the chosen multicast IP address comprises: 

means for r andomly hopping from one multicast IP address to another in a sequence 
known onlv to the transmitter and sub scriber end stations but which appears random to an 

Claim 18 (currently amended): The system of claim 1 5 wherein the means for selectively 
varying the chosen multicast IP address comprises; 



means for randomly hopping from one multicast IP address to another chosen from the set 
of multicast IP addresses in a sequence known onlv to the transmitter £tnd subscriber end stations 
but which appears random to an attacker . 

Claim 19 (currently amended): The system of claim 1 3, further comprising: 

means for receiving unicast data intended for fa] an end destination host site by at least 
one remote decoy end station Ibr transmitting multicast packets; and 

means for formatting said the unicast data into said the multicast packets tor 
communicating on said the chosen multicast IP address to at least one subscriber end station for 
receiving multicast packets; 

wherein the at least one of said subscriber end station for receiving multicast packets 
comprises means for communicating said the unicast data to said the host site. 

Claim 20 (currently amended): The system of claim 1 9 further comprising: 
means for identifying to the I? network a preferred route to the end destination host site ^ 
through ssnd the at least one remote decoy end station for transmitting multicast packets. 

Claim 2 1 (ciarrently amended): The system of claim 20 [1 8] further comprising: 



means for filtering said the unicast data received at the at least one remote decoy end 
station and limiting the rate of communicating multicast packets. 
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Claim 22 (currently amended): iTie system of elaim 21 wherein the means for filtering 
comprises means for identifying and discarding, at the at least one remote decoy end station , 
unieast data implementing an attack on said lh& host site. 




Claim 23 (currently amended): I'hc system of claim 22 f 1 8] wherein isatd the at least one 
remote decoy end sUiLion[s] for transmitting mullicasl packets is [are], when in use, located 
within a single autonomous system of the network. 



Claim 24 (currently amended): The system of claim 23 wherein «atd the at least one 
remote decoy end station for transmitting multicast packets js [are], when in use, located adjacent 
to border routers within the single autonomous system of the network. 
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